$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f69bff0-5757-34b6-8531-a22c35713534.roa File: 6f69bff0-5757-34b6-8531-a22c35713534.roa (raw, json) Hash identifier: 0p7OKG4L34XQZJ0S2F9NdsBwDLMlI+UDtwYPPjRTzC8= Subject key identifier: 45:ED:83:8F:19:2E:96:90:24:5E:6A:47:C9:E7:16:1C:93:AD:FB:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581FBACDF562E4CD4E60A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f69bff0-5757-34b6-8531-a22c35713534.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 198.45.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:fb:ac:df:56:2e:4c:d4:e6:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=82f46cc3-0f4b-44ac-9357-56e9c24d9d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:e1:d4:a9:77:71:5e:ae:8a:5b:a9:d6:38: c2:0b:b6:3b:e6:ec:60:12:53:8c:a3:4f:0d:14:4d: 65:70:79:41:85:fc:86:7f:4c:fa:49:a2:bc:d1:6d: 63:60:13:0e:6b:8c:fc:16:89:06:bb:60:be:61:eb: 00:72:9c:be:ac:84:87:f2:05:9f:21:7e:f4:0e:c4: a5:bc:12:54:85:39:c6:6a:18:86:9d:d5:28:5e:9d: cd:3e:c9:9f:50:fb:7f:5f:5d:36:9f:dd:70:de:05: 02:df:81:00:b9:09:23:90:6a:ff:3d:d6:e0:e6:1b: 4b:05:01:9e:81:6f:40:fb:7b:0f:4c:f7:6a:24:d0: 12:4a:4f:85:46:7d:50:77:57:88:ab:3c:04:49:36: 43:8d:ca:88:fa:61:f3:ec:fa:31:15:17:a7:e5:29: eb:a8:8c:25:71:75:a7:53:bf:33:15:09:d2:d4:54: 91:20:1d:bf:3f:88:49:1b:d4:1a:53:8f:05:36:5d: de:32:6f:99:fc:10:99:4b:d8:e3:0b:0d:b1:b0:9e: fa:63:20:a6:9b:b7:9e:ab:23:ce:58:9a:85:b0:57: c1:99:56:51:69:21:a1:a2:5e:11:91:96:1b:53:e1: d9:c7:c3:e2:b4:58:77:50:58:9c:27:2e:b0:cd:70: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:ED:83:8F:19:2E:96:90:24:5E:6A:47:C9:E7:16:1C:93:AD:FB:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f69bff0-5757-34b6-8531-a22c35713534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:01:d2:f6:86:e9:ba:3d:f3:7a:63:a9:08:5d:27:8b:06:7c: 3c:b9:3f:db:e8:01:d7:f6:ed:9b:67:58:df:70:8b:ca:57:67: ea:98:df:4f:b9:54:91:e3:1c:7d:e6:86:7f:52:f6:57:3c:f3: 68:a1:3b:4d:d3:fa:9d:ff:cf:aa:34:93:9b:76:48:b8:79:e2: bb:e5:1c:a2:f7:c4:e9:71:27:ad:3b:18:60:37:f6:cf:15:ed: 6d:cd:24:ec:1c:83:db:29:d3:b9:19:fd:03:13:0e:2b:d3:01: cf:61:24:1d:dc:aa:1e:6e:2d:56:00:ee:1b:8a:c1:2b:5c:b4: d1:29:4f:80:af:ad:18:74:a0:08:54:be:c4:06:a3:06:47:60: fc:16:c2:b6:47:00:3b:62:81:5d:f1:2a:d1:25:8f:dd:bf:90: f7:3f:50:52:3d:8a:86:c4:06:64:ca:53:c5:72:2c:c0:c7:ae: da:77:eb:9f:d8:c4:2c:fb:54:49:51:6a:e5:ee:0c:ba:55:46: 71:ac:e9:d8:12:d1:d8:f0:9b:a4:42:8e:5a:1f:5f:fd:06:0b: 09:a7:d0:dc:60:4e:57:bc:d6:30:23:29:0d:c3:32:22:80:c5: 6e:ff:c9:b2:99:2d:a2:a4:97:52:a9:a2:6e:e7:5c:f3:cb:fd: da:1a:f4:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfus31YuTNTmCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODJmNDZjYzMtMGY0Yi00NGFjLTkzNTctNTZlOWMyNGQ5ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRzh1Kl3cV6uilup1jjCC7Y75uxgElOMo08N FE1lcHlBhfyGf0z6SaK80W1jYBMOa4z8FokGu2C+YesAcpy+rISH8gWfIX70DsSl vBJUhTnGahiGndUoXp3NPsmfUPt/X102n91w3gUC34EAuQkjkGr/Pdbg5htLBQGe gW9A+3sPTPdqJNASSk+FRn1Qd1eIqzwESTZDjcqI+mHz7PoxFRen5SnrqIwlcXWn U78zFQnS1FSRIB2/P4hJG9QaU48FNl3eMm+Z/BCZS9jjCw2xsJ76YyCmm7eeqyPO WJqFsFfBmVZRaSGhol4RkZYbU+HZx8PitFh3UFicJy6wzXBYrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXtg48ZLpaQJF5qR8nnFhyTrfv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmY2OWJmZjAtNTc1Ny0z NGI2LTg1MzEtYTIyYzM1NzEzNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi26MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0B0vaG6bo983pjqQhdJ4sGfDy5P9voAdf27ZtnWN9wi8pXZ+qY30+5 VJHjHH3mhn9S9lc882ihO03T+p3/z6o0k5t2SLh54rvlHKL3xOlxJ607GGA39s8V 7W3NJOwcg9sp07kZ/QMTDivTAc9hJB3cqh5uLVYA7huKwStctNEpT4CvrRh0oAhU vsQGowZHYPwWwrZHADtigV3xKtElj92/kPc/UFI9iobEBmTKU8VyLMDHrtp365/Y xCz7VElRauXuDLpVRnGs6dgS0djwm6RCjlofX/0GCwmn0NxgTle81jAjKQ3DMiKA xW7/ybKZLaKkl1Kpom7nXPPL/doa9Es= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:35 2025 by rpki-client